1. Data controller
This notice is prepared for the Ustat Tamircim application offered under the üstat.net brand. Before publication, the official developer / legal entity name shown in store accounts should match the data controller information used here.
2. Categories of personal data processed
- Identity and contact data.
- Customer card and vehicle card data.
- Service records, photos and technical notes.
- Finance, collection, payment and document data.
- Support records, message contents and transaction logs.
- Technical data such as device information, app version, IP and security logs.
3. Purposes of processing
- To manage service workflows, vehicle cards, customer tracking and work orders.
- To operate finance, stock, product and document center functions.
- To manage official document workflows including e-invoice and e-archive.
- To run support, in-app communication, notifications and message center processes.
- To ensure information security, logging, troubleshooting and system improvement.
- To fulfill legal obligations and respond to authorized institutions.
4. Collection method and legal basis
Personal data may be collected automatically or partially automatically through app screens, support channels, integrations, device records and electronic communication channels.
Data may be processed on the basis of contract performance, legal obligations, protection of legal rights, legitimate interests and, where required, explicit consent.
5. Transfers
Personal data may be transferred, to the extent necessary for service provision, to cloud providers, integrators, technical support partners and legally authorized public authorities.
6. Retention period
Personal data is retained for as long as required by the processing purpose and applicable legal retention periods. At the end of those periods, the data is deleted, destroyed or anonymized.
7. Data subject rights
Under Article 11 of the KVKK, data subjects have the following rights:
- To learn whether personal data is processed.
- To request information if personal data has been processed.
- To learn the purpose of processing and whether data is used accordingly.
- To know the third parties to whom data is transferred domestically or abroad.
- To request correction of incomplete or inaccurate data.
- To request deletion or destruction under legal conditions.
- To object to adverse outcomes arising from automated analysis.
- To request compensation for damages caused by unlawful processing.
8. Application method
KVKK-related applications may be submitted to bilgi@ustat.net together with information reasonably sufficient for identity verification.